{"id":694929,"url":"https://alion.io/job/logosspace-lead-security-architect-cloud-platform-network-security","title":"Lead Security Architect – Cloud Platform & Network Security","company":{"id":716959,"name":"Logos Space","domain":"logos.space","url":"https://alion.io/company/logos-6","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"C","score":56,"open_postings":19,"ghost_share":0.737,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mountain View, United States","San Diego, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":220000,"max":270000,"currency":"USD","period":"year","gross":null,"usd_annual":270000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Apache Kafka","optional":false},{"name":"CI/CD","optional":false},{"name":"Cilium","optional":false},{"name":"Cilium Tetragon","optional":false},{"name":"CMMC","optional":false},{"name":"eBPF","optional":false},{"name":"Falco","optional":false},{"name":"FedRAMP","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Service Mesh","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"STRIDE","optional":true}],"status":"live","first_seen_at":"2026-08-27T14:47:51Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-31T03:33:26Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":62},"description":"Lead Security Architect - Cloud Platform & Network Security\nLogos Space is a Low Earth Orbit (LEO) satellite system purpose-built to serve the connectivity needs of the commercial enterprise users and government users. We will help fill an important gap in the market, providing resilient, high-performance satellite-based connectivity services to enterprise and government customers worldwide. Business customers have contracts with agreed-upon performance standards for their broadband, and Logos will build these capabilities into the system from the beginning. Speed and reliability are the foundation of the system. Logos is designed to extend cloud and data center network connectivity anywhere in the world to fixed, seaborne, and airborne terminals.\nLogos is led by a team of highly experienced engineers with proven track records in the networking and satellite industries.\nThe Product and Data Link Security team at Logos Space Engineering is responsible for ensuring the success of our network by providing unique levels of security and authentication in space communications. This position is a critical driver of the architecture, overseeing development efforts specific to the security architecture, as well as working with other teams like ground segment and spacecraft systems.\nWe are seeking engineers who can thrive in a fast-moving environment, comfortable taking vague design ideas and turning them into concrete, testable architecture and secure solutions.\nThe Role:\nWe are seeking an experienced Lead Security Architect - Cloud Platform & Network Security to spearhead the security architecture for our LEO satellite network infrastructure.\nWhile our DevSecOps team owns software supply chain security and CI/CD vulnerability scanning, this role owns the runtime threat resistance, zero-trust network topology, cryptographic key management, and distributed systems defense across our multi-region cloud, ground stations, and edge software nodes.\nWorking closely with the Lead, Cloud Platform Software, you will define how our Kubernetes clusters, telemetry pipelines, and SDN control planes withstand real-world cyber threats in hostile or degraded operating environments.\nKey Responsibilities:\nZero-Trust Workload Identity: Architect and implement identity frameworks (e.g., SPIFFE/SPIRE, mTLS, Service Mesh) to establish cryptographically verified identity for microservices operating across cloud, ground segment nodes, and hybrid edge hardware.\nSDN & Control Plane Hardening: Conduct threat modeling and design runtime security controls for our Software-Defined Networking (SDN) stack, protecting routing protocols, control messages, and telemetry streams from spoofing, tampering, and denial-of-service (DoS) attacks.\nRuntime Defense & Policy Enforcement: Deploy eBPF-based runtime monitoring (e.g., Tetragon, Falco, Cilium) and policy-as-code admission controllers (OPA/Gatekeeper) to detect and neutralize zero-day exploits, container breakouts, and unauthorized process executions in real time.\nKey Ceremonies & PKI Governance: Design, orchestrate, and execute formal cryptographic key ceremonies (multi-party key generation, root CA creation, and secret splitting) to establish trust anchors for root certificate authorities, satellite communication keys, and cloud/ground HSM clusters\nHardware-Backed Key & Cryptographic Management: Oversee the architecture for root-of-trust, Hardware Security Modules (HSMs), TPMs, and Vault clusters managing satellite communications keys, TLS certificates, and secrets lifecycle.\nSecurity Telemetry & Anomaly Detection: Collaborate with the Platform team to embed security observability into high-throughput logging and telemetry pipelines (Kafka, Prometheus, SIEM/SOAR) for automated threat detection and incident response.\nDefense & Federal Compliance: Translate rigorous federal and defense cybersecurity mandates (e.g., NIST SP 800-53, CMMC Level 3+, FedRAMP High, DoD IL5/IL6) into technical security designs without compromising platform agility or speed.\nBasic Qualifications\nEducation: Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or equivalent practical experience.\nExperience: 10+ years in cybersecurity, software engineering, or infrastructure security, with 5+ years architecting security for distributed cloud platform software.\nTechnical Expertise:\nDeep understanding of Kubernetes architecture, container isolation, Linux kernel security, and eBPF technology.\nHands-on experience with modern networking protocols, zero-trust architectures, service meshes (Istio/Cilium), and mTLS.\nProficiency writing software or tooling in Go, Rust, or Python.\nHands-on architectural experience with HSMs, TPMs, and enterprise secrets management (e.g., HashiCorp Vault).\nClearance: Ability and willingness to obtain and maintain a Top Secret Clearance.\nPreferred Qualifications\nExperience securing carrier-grade telecom, aerospace, satellite ground stations, or critical defense network infrastructure.\nDemonstrated experience handling threat modeling (STRIDE/ATT&CK) for real-time distributed routing or control plane systems.\nDeep knowledge of public cloud security guardrails across AWS, GCP, or Azure alongside hybrid/on-prem deployments.","description_format":"text","description_chars":5241,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Satellite Manufacturing","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-11T01:44:19Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.358,"p_room":0.28,"age_days":63,"expected_fill_days":28,"reasons":["seen:63","stale_co","win:tail","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":270000,"is_top_pay":true},"html_url":"https://alion.io/job/logosspace-lead-security-architect-cloud-platform-network-security","json_url":"https://alion.io/job/logosspace-lead-security-architect-cloud-platform-network-security.json","meta":{"generated_at":"2026-10-31T03:48:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5377,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716959},"rest":"https://alion.io/mcp/rest/get_company?id=716959"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flogosspace-lead-security-architect-cloud-platform-network-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flogosspace-lead-security-architect-cloud-platform-network-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flogosspace-lead-security-architect-cloud-platform-network-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/logosspace-lead-security-architect-cloud-platform-network-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flogosspace-lead-security-architect-cloud-platform-network-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":694929}},{"tool":"search_jobs","arguments":{"company":"logos.space","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":694929},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}